Informationsteknik, kontorsutrustning

This document specifies additional requirements to ISO/IEC 17021-1. The requirements contained in this document, when implemented, support the demonstration of competence, consistency and reliability by the bodies performing auditing and certification of an artificial intelligence management system (AIMS) according to ISO/IEC 42001 for organizations that provide, develop or use AI systems. Certification of AIMS is a third-party conformity assessment activity (as described in ISO/IEC 17000:2020, 4.5), and bodies performing this activity are third-party conformity assessment bodies. This document also provides the necessary information and confidence to customers about the way certification has been granted. NOTE This document can be used as a criteria document for accreditation or peer assessment.

This document provides a high-level framework and guidance for the development and operation of conformity assessment schemes, including certification schemes, for artificial intelligence (AI) systems.

This standard proposal outlines artificial intelligence (AI) concepts, applications, and implications, as well as benefits, risks, governance framework, and scope for use by organizations within the context of project, programme, and portfolio management (P3M). This proposed standard is intended to supplement the other TC 258 standards and is in direct alignment with standards prepared by ISO/TC 258. This document provides guidance for organizations on what to consider when adopting or looking to improve on existing AI technologies that directly support P3M. This proposed standard is applicable to any organization, including public, private, and charitable, as well as to any type of project, regardless of purpose, delivery approaches, project or programme lifecycle model used, complexity, size, cost, or duration. This document also provides (P3M) practitioners (including top-level management, project managers, PMO’s, etc.) with AI-related guidance and consideration in the areas of security, privacy, transparency, and bias, as well as related data governance, ethical and risk considerations.

This document provides guidance for sectoral stakeholders and product manufacturers in generating ICT product-relevant information based on EN 18037. Sectoral stakeholders are supported in applying the risk and cybersecurity assessment methodology so that the information needs of product manufacturers are covered by the sectoral assessment report. Product manufacturers receive guidance in using methodology according to EN 18037 for own assumptions of their ICT product’s sector-specific risks and security requirements. This document uses a step-by-step approach for guiding sectoral stakeholders and product manufacturers through the assessment. For each step, the relevant information provided by EN 18037 is summarized or referenced and the enhancements or clarifications in support of the information needs of the ICT product manufacturers are pointed out. From the perspective of product manufacturers, the re-use of existing product-specific specifications and certification tools is of particular relevance. Therefore, this document provides guidance how the results of sectoral assessments according to EN 18037 can be connected with these specifications and tools.

This document specifies the evaluation of natural language processing systems, in the sense of measuring the quality of a system’s results to assess its functional suitability. It provides a definition of evaluation methods for those systems, together with guidance on how to select, implement and interpret those evaluation methods. This document covers quantitative metrics as well as other evaluation methods. It includes requirements on the implementation of the described metrics, and further requirements on the technical resources involved in the evaluation process.